Release Notes

1.0.2#

Added

• The daily integrity check runs inside a time budget. Plugins it cannot reach in one run are reported as "skipped" and checked by a follow-up a couple of minutes later, so a site with many large premium plugins is still fully checked instead of the scan dying part-way. wp pug check-integrity says when plugins were skipped, and the dashboard's last-scan record carries a partial flag.
• pug_time_budget, pug_package_max_bytes, pug_scan_size_limit and pug_known_library_hashes filters for hosts with unusual limits or additional vendored libraries.

Changed

• The bundled StoreEngine License SDK is recognised by its exact contents: a release that adds it (or any library release listed through pug_known_library_hashes) is no longer held for the SDK's own updater and licensing code. icanhazip.com and storeengine.pro are known hosts for the "new remote host" rule.

Fixed

• A very large plugin update can no longer stop half-way with "Maximum execution time exceeded". Package inspection raises the PHP time limit, stops cleanly when its time budget or the 512 MB package cap is reached, and then applies the configured fail mode (fail open installs with a High alert, fail closed stops the update), instead of white-screening a manual update or leaving the site in maintenance mode after a background update.
• If PHP still dies during an inspection (out of memory, a hard host limit), the plugin's active state is restored, maintenance mode is lifted and the failure is recorded under Alerts, so the site never stays "Briefly unavailable".
• A baseline taken by the daily check or by "Accept changes" no longer stops the baseline from being refreshed when the same plugin updates later in the same request, which could raise a false "Files changed without an update" alert the next day.
• Bundled StoreEngine SDK refreshed to the current 1.6.2 build: no more PHP 8.4 "implicitly nullable parameter" deprecation notices on every page load, and it loads only inside WordPress.
• The test suite runs on a plain WordPress test library (host or wp-env) without touching a real wp-content folder or the network.

1.0.0 (29 October 2026)#

First commercial release.

New

• Licensing and updates through technoleet.dev: a Update Gate → License screen to activate and deactivate the license key, daily background re-checks with a 14-day offline grace period, and plugin updates served from the store while the license is valid. Updates are only applied when the package contains the plugin’s critical files.
• Update URI header so WordPress never offers updates for this slug from another source.
• Translations placed in languages/ now load.
• pug_storeengine_product_id, pug_storeengine_store_url, pug_storeengine_allow_local and pug_store_dashboard_url filters, plus the PUG_STOREENGINE_PRODUCT_ID and PUG_STOREENGINE_STORE_URL constants.

Improved

• Premium Update Gate no longer gates its own updates by default; they are verified by the updater instead. The Always gate override still inspects them.
• technoleet.dev is a known host for the remote-new-host rule, so a release that references the store is not flagged.
• uninstall.php also guards against direct access.

Included from the development builds

• Update gate for manual, bulk, AJAX, WP-CLI and automatic background updates.
• Rules engine with about 25 weighted rules; Clean, Review and Hold verdicts; quarantine as one hash-verified zip per review; approve-and-install, trust-vendor and reject actions.
• Hidden plugin detector, integrity watch, de-duplicated alerts with email and webhook notifications, dashboard widget, History screen and the wp pug WP-CLI commands.